6400 BranchCache: Received an incorrectly formatted response while discovering content availability
Written when BranchCache receives an incorrectly formatted response while discovering content availability. It is mainly a diagnostic event for BranchCache operation.
Overview
The subcategory is Audit Other System Events. It is generated when BranchCache (a feature that caches and shares content locally to save bandwidth between sites) receives a malformed response to a content-availability query.
How it is triggered
- When, during BranchCache content discovery, a malformed response is received from a peer or server.
Security review points
- It is mostly a diagnostic event from BranchCache communication inconsistencies or implementation differences, with low security priority. In environments using BranchCache, check the peer only if malformed responses concentrate on a specific one.
Notes for log review
- It only carries meaning in environments running BranchCache. It is normally for operations/troubleshooting, not a primary security-monitoring target.
Key fields
| Field | Meaning |
|---|---|
| Responder | The peer/server that returned the malformed response |